SCAM AWARENESSIdentity theft notices
This scam uses the fear of identity theft to steal your identity. You get an alert that looks like it is from your bank, a credit bureau, or a government office, saying your information was exposed or misused. To "protect" yourself, you are told to verify your identity by uploading your driver's license, Social Security number, or a selfie.
How this scam works
The message arrives as a text, email, or call. It may mention a data breach, suspicious activity, or someone opening an account in your name. It includes a link to a page that looks official, with a logo and a case number. The page asks for your full name, date of birth, Social Security number, account logins, and photos of your ID.
Some versions offer a paid "identity protection" plan or ask for a fee to restore your record. Once the scammer has your documents, they can open new credit cards, file a false tax return, or take over your existing accounts. The fake alert creates the very problem it warned you about.
What it can look like
EXAMPLE · NOT A REAL MESSAGE"ALERT: Your identity was used in a fraudulent loan application. To protect your accounts, verify your identity within 24 hours at [link]. Upload a photo of your driver's license and enter your Social Security number to close the case."
Warning signs
- An unexpected alert pushes you to click a link to verify your identity.
- You are asked to upload ID photos or a selfie through a text or email link.
- The message demands your full Social Security number or account password.
- There is a short deadline, like 24 hours, or your accounts will be locked.
- The sender's address or web link does not match the real organization.
- You are asked to pay a fee to restore or protect your identity.
How to protect yourself
- Do not click links in unexpected identity or security alerts.
- Go directly to the organization's official website or app, or call the number on your statement.
- Never send ID photos or your Social Security number through links you did not request.
- Check your free credit reports regularly for accounts you do not recognize.
- Consider freezing your credit with all three bureaus. It is free and you can lift it when needed.
- Turn on two-step verification for your bank and email accounts.
If you already responded
- Go to IdentityTheft.gov to report what happened and get a personal recovery plan.
- Freeze your credit with all three nationwide credit bureaus right away.
- Change passwords on any accounts you entered on the fake page, starting with email and banking.
- Call your bank using the number on your card to watch for or block suspicious activity.
- If you shared a driver's license photo, contact your state motor vehicle agency for guidance.
- Watch your mail, credit reports, and accounts closely for new activity.
Get step-by-step recovery help →
Where to report it
Common questions
Do credit bureaus or banks text you to upload your ID?
Legitimate companies may sometimes ask you to verify your identity, but you should never do it through a link in an unexpected message. Instead, log in through the company's official app or website you type in yourself, or call the number on your statement. If the request is real, you will find it there too.
What should I do if I think my identity was really stolen?
Visit IdentityTheft.gov, the federal government's site for reporting identity theft and getting a step-by-step recovery plan. Place a credit freeze or fraud alert, review your credit reports, and contact the businesses where fraud happened. You do not need to pay a private company to report identity theft to the government.
Is a credit freeze free?
Yes. By federal law, placing and lifting a credit freeze with each of the three nationwide credit bureaus is free. A freeze makes it much harder for someone to open new credit in your name. You can temporarily lift it when you apply for a loan or credit card yourself.